Claire
|
c4f2609f7a
|
Merge pull request from GHSA-ccm4-vgcc-73hp
* Tighten allowed HTML in oEmbed-based preview cards
* Sanitize preview cards at render time
* Add `sandbox` attribute to preview card iframes
|
2023-07-06 15:03:33 +02:00 |
|
Claire
|
f626e0d228
|
Add hardened headers to user-uploaded files (#25756)
|
2023-07-06 14:33:32 +02:00 |
|
Claire
|
9b6c0cac7d
|
Add hardened headers to user-uploaded files (#25756)
|
2023-07-06 14:32:26 +02:00 |
|
Claire
|
35830cd8cc
|
Update dependencies
|
2023-07-06 13:45:58 +02:00 |
Renaud Chaput
|
94c67e8bfd
|
Allow carets in URL search params (#25216)
|
2023-07-06 13:45:58 +02:00 |
Vyr Cossont
|
798d26dd04
|
Fix Redis client and type errors introduced in #24285 (#24342)
|
2023-07-06 13:45:58 +02:00 |
|
Vyr Cossont
|
9ad33eb160
|
IndexingScheduler: fetch and import in batches (#24285)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
5e55ca25d6
|
Fix ResolveURLService not resolving local URLs for remote content (#25637)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
0bcb4f73f1
|
Change /api/v1/statuses/:id/history to always return at least one item (#25510)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
04f76675d1
|
Add finer permission requirements for managing webhooks (#25463)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
53acab6d2b
|
Fix wrong view being displayed when a webhook fails validation (#25464)
|
2023-07-06 13:45:58 +02:00 |
Emelia Smith
|
78358b84b9
|
Prevent UserCleanupScheduler from overwhelming streaming (#25519)
|
2023-07-06 13:45:58 +02:00 |
Daniel M Brasil
|
c285f9d1a1
|
Fix incorrect pagination headers in `/api/v2/admin/accounts` (#25477)
|
2023-07-06 13:45:58 +02:00 |
|
Emelia Smith
|
42bffbc337
|
Fix logging of messages that are binary before closing their connection (#25361)
|
2023-07-06 13:45:58 +02:00 |
|
Emelia Smith
|
f94aee0ed5
|
Fix performance of streaming by parsing message JSON once (#25278)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
41a0a3c87f
|
Fix CSP headers when S3_ALIAS_HOST includes a path component (#25273)
|
2023-07-06 13:45:58 +02:00 |
|
Daniel M Brasil
|
995ad9602b
|
Fix `tootctl accounts approve --number N` not aproving N earliest registrations (#24605)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
660845f781
|
Change profile updates to be sent to recently-mentioned servers (#24852)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
0b627dcf9e
|
Fix being able to vote on your own polls (#25015)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
a3f58ceea4
|
Fix race condition when reblogging a status (#25016)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
bb87736bf0
|
Change OpenGraph-based embeds to allow fullscreen (#25058)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
37972fe3c7
|
Fix “Authorized applications” inefficiently and incorrectly getting last use date (#25060)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
64416e4000
|
Remove invalid X-Frame-Options: ALLOWALL (#25070)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
eceb960744
|
Change Identity to not destroy associated User on destroy (#25098)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
ebe009ff09
|
Fix /api/v1/conversations sometimes returning empty accounts (#25499)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
2617c33fc3
|
Fix ArgumentError when loading newer Private Mentions (#25399)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
d81b891fa8
|
Fix multiple N+1s in ConversationsController (#25134)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
a705bb84e6
|
Fix user archive takeouts when using OpenStack Swift (#24431)
|
2023-07-06 13:45:58 +02:00 |
|
Claire
|
fac2c9eb7d
|
Update rack, rails, nokogiri and doorkeeper gems
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
a3d69a2c5d
|
Fix OAuth apps page crashing when listing apps with certain admin API scopes (#25713)
|
2023-07-06 13:45:40 +02:00 |
|
Renaud Chaput
|
8eb1bb8ba6
|
Allow carets in URL search params (#25216)
|
2023-07-06 13:45:40 +02:00 |
|
Vyr Cossont
|
652ff76462
|
Fix Redis client and type errors introduced in #24285 (#24342)
|
2023-07-06 13:45:40 +02:00 |
|
Vyr Cossont
|
6f484fbbd2
|
IndexingScheduler: fetch and import in batches (#24285)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
79f5b8f156
|
Fix ResolveURLService not resolving local URLs for remote content (#25637)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
f8930a67a0
|
Change /api/v1/statuses/:id/history to always return at least one item (#25510)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
e65e3a6d14
|
Add finer permission requirements for managing webhooks (#25463)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
8acbfc6ab1
|
Fix wrong view being displayed when a webhook fails validation (#25464)
|
2023-07-06 13:45:40 +02:00 |
|
Emelia Smith
|
3ef53958b2
|
Prevent UserCleanupScheduler from overwhelming streaming (#25519)
|
2023-07-06 13:45:40 +02:00 |
|
Daniel M Brasil
|
fd1ffd72eb
|
Fix incorrect pagination headers in `/api/v2/admin/accounts` (#25477)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
7bd34f8b23
|
Fix infinite loop in AccountsStatusesCleanupScheduler (#24840)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
7012bf6ed3
|
Improve automatic post cleanup worker performances (#24785)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
d9e45f2fa9
|
Fix AccountsStatusesCleanupScheduler not spreading deletes across accounts correctly (#24607)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
0e139e3c4d
|
Change automatic post deletion thresholds and load detection (#24614)
|
2023-07-06 13:45:40 +02:00 |
|
Emelia Smith
|
23e7b4d28d
|
Fix logging of messages that are binary before closing their connection (#25361)
|
2023-07-06 13:45:40 +02:00 |
|
Emelia Smith
|
e78ee582f7
|
Fix performance of streaming by parsing message JSON once (#25278)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
a197fc094f
|
Fix CSP headers when S3_ALIAS_HOST includes a path component (#25273)
|
2023-07-06 13:45:40 +02:00 |
|
Daniel M Brasil
|
bd7cbeeadf
|
Fix `tootctl accounts approve --number N` not aproving N earliest registrations (#24605)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
2779bce9a2
|
Add fallback redirection when getting a webfinger query `LOCAL_DOMAIN@LOCAL_DOMAIN` (#23600)
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
210ff36860
|
Change AccessTokensVacuum to also delete expired tokens (#24868)
|
2023-07-06 13:45:40 +02:00 |
|
Claire
|
99c2bbbec9
|
Change profile updates to be sent to recently-mentioned servers (#24852)
|
2023-07-06 13:45:40 +02:00 |